General
- Target 2026-08-04_143386c5cc47dfda714303903629fd3a_coinminer_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 3.7MB
- Sample260804-j66g2afh89
- SHA256 265633362298f8fbda8fa1504677ef0919dd49036015ae95b147faab7a84af2a
- MD5 143386c5cc47dfda714303903629fd3a
- SHA1 e1b667f5f4e204f7f12fbe5c80fcac47805e4129
- SHA512 de0e6f454f55a28f6676e46bb5b094c6d4a5d54b064e3db066f8d14b08e78c78cbc64e2b120a13da7fac4a1000b163836afe19770780bb11d28443c71c9f67ae
- SSDEEP 49152:GTyp1pnxv805K7wcpBTA4K9gYybIYEsIxs6ZENVxeZBbLDCHWjDqMj6z:hxEhDjM6YgFEeVxeZNiMDzj6z
- TLSH T15D06C00BBCD119F5C0AEA2328A6692927A71BC441F3223D73E50B37C2F72BD46A75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_143386c5cc47dfda714303903629fd3a_coinminer_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_143386c5cc47dfda714303903629fd3a_coinminer_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_143386c5cc47dfda714303903629fd3a_coinminer_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 3.7MB
- SHA256 265633362298f8fbda8fa1504677ef0919dd49036015ae95b147faab7a84af2a
- MD5 143386c5cc47dfda714303903629fd3a
- SHA1 e1b667f5f4e204f7f12fbe5c80fcac47805e4129
- SHA512 de0e6f454f55a28f6676e46bb5b094c6d4a5d54b064e3db066f8d14b08e78c78cbc64e2b120a13da7fac4a1000b163836afe19770780bb11d28443c71c9f67ae
- SSDEEP 49152:GTyp1pnxv805K7wcpBTA4K9gYybIYEsIxs6ZENVxeZBbLDCHWjDqMj6z:hxEhDjM6YgFEeVxeZNiMDzj6z
- TLSH T15D06C00BBCD119F5C0AEA2328A6692927A71BC441F3223D73E50B37C2F72BD46A75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE